Summary: We collect only what we need to run the app. We do not sell your personal data. Crypto wallet data is secured with multisig technology. You can request deletion of your account and data at any time.
1. Who we are
Waiting ("Waiting," "we," "us," or "our") is operated by Henko Technologies, LLC, a Florida limited liability company. Our primary website is peoplewhowait.com and our mobile application is available on iOS and Android. Questions about this policy may be directed to privacy@peoplewhowait.com.
2. Information we collect
Information you provide directly
- Account registration: name, email address or phone number, date of birth (required to verify you are 18 or older for wallet features), and profile details you choose to share.
- Profile content: workplace, schedule, profile photo, and any other content you add to your public or private profile.
- Wallet setup: We generate and store a multisig wallet on your behalf. Your wallet address is stored; your private key is never stored on our servers — it remains on your device.
- Communications: Support messages, reports of other users, and feedback you send us.
Information collected automatically
- Device and usage data: Device type, operating system, app version, crash logs, and feature usage patterns.
- Location data: Only if you are a server who has opted into the live map feature. Location is never collected from patrons or from servers who have not opted in.
- Transaction data: On-chain transaction records (tip amounts, timestamps, wallet addresses) are publicly visible on the Solana blockchain. We also store transaction metadata in our own systems for your in-app history and support purposes.
- Authentication data: Biometric authentication is processed entirely on-device by iOS or Android. We never receive or store biometric data.
Information from third parties
- Firebase: We use Google Firebase for authentication, database, and push notifications. Firebase may collect analytics data subject to Google's privacy policy.
- Transak: If you use fiat on/off-ramp features, Transak collects identity verification (KYC) data directly. We do not receive or store this data.
- Helius: We use Helius as our Solana RPC and webhook provider to monitor on-chain transactions.
3. How we use your information
- To create and maintain your account
- To display your public profile and schedule to other users (only if your profile is set to public)
- To process and record USDC tips and wallet transactions
- To send push notifications you have opted into
- To power the live map (only for opted-in public servers)
- To enforce our Terms of Service, investigate reports, and protect user safety
- To comply with applicable law and respond to legal process
- To improve the app through aggregate, anonymized analytics
We do not use your information to serve third-party advertising. We do not sell your personal data to any third party.
4. Profile visibility and your controls
You control whether your profile is public or private at all times. Public profiles may appear on the live map, in search results, and on your public profile page at peoplewhowait.com/p/[username]. Private profiles are only visible to users you have invited via your QR code.
You may change your profile visibility, remove subscribers, or delete your account at any time from within the app.
5. Crypto wallet and blockchain data
Important: Transactions on the Solana blockchain are public and permanent. Once a tip is sent, it cannot be reversed. Your wallet address and transaction history are visible on-chain to anyone. Do not share your private key or recovery phrase with anyone, including Waiting staff.
Your multisig wallet is secured with three keys: your device key, the Waiting application key, and a recovery key stored in a secure, encrypted vault. No single key alone can authorize transactions. If you lose access to your device, the recovery process requires verification of your identity and incurs a convenience fee.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, transaction records may be retained for up to 7 years for tax and anti-money-laundering purposes).
On-chain transaction data is permanent and outside our control — blockchain records cannot be deleted.
7. Children's privacy
Waiting is not directed at anyone under the age of 18. We do not knowingly collect personal information from users under 18. If we learn we have collected information from a minor, we will delete it promptly. To report a concern, contact privacy@peoplewhowait.com.
8. Your rights
Depending on where you live, you may have rights including:
- The right to access the personal data we hold about you
- The right to correct inaccurate data
- The right to request deletion of your data ("right to be forgotten")
- The right to data portability
- The right to opt out of certain data processing
To exercise any of these rights, contact us at privacy@peoplewhowait.com. We will respond within 30 days.
9. Security
We use industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, Firebase security rules, and multisig wallet architecture. No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@peoplewhowait.com.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or email at least 14 days before they take effect. Continued use of the app after that date constitutes acceptance of the updated policy.
11. Contact
Waiting
Henko Technologies, LLC
privacy@peoplewhowait.com